Don't we normally put that sort of normative advice in the actual implementation? Which I guess would end up being `RSAPrivateKey.generate` in this case.